$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft File: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft (raw, json) Hash identifier: JCd7KqjdmAaC7wpMIK5zjjOhtScZOhNvSjsHwz7d7KY= Subject key identifier: 4A:E6:49:0C:D5:E7:86:14:5E:FB:36:62:98:03:48:23:AB:A9:6B:BE Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 Certificate issuer: /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Certificate serial: 1EB0C4CF0BFEBD22D874F5618E04B4CC2DCC2B06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft Manifest number: 0184 Signing time: Sun 19 Oct 2025 16:22:05 +0000 Manifest this update: Sun 19 Oct 2025 16:17:05 +0000 Manifest next update: Thu 23 Oct 2025 01:59:05 +0000 Files and hashes: 1: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: jZdzzwUnE5NySNtgaEjKcLOBnZGLd0OeUfLgUNjS8h8=) 2: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl (hash: NYXLqdYvPyEcxGP6xdEdGOEKDh0PWMgvKYTMlFvd12I=) 3: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: HdUQMZ7SOKpAyFz6JesRqd55RtIwIZs1nM/RQd+kRrc=) 4: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: Ss0eIh55eF1+18NBRc56XTthBY2pyra5MKG9X4X5KfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b0:c4:cf:0b:fe:bd:22:d8:74:f5:61:8e:04:b4:cc:2d:cc:2b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Validity Not Before: Oct 19 16:17:05 2025 GMT Not After : Oct 23 01:59:05 2025 GMT Subject: CN=4AE6490CD5E786145EFB366298034823ABA96BBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c5:09:60:bd:d4:42:41:7a:40:52:26:f4:81: 81:a2:cd:99:31:06:fe:94:9b:21:ab:4b:57:f1:0c: ac:62:96:9d:35:b2:1b:18:0c:54:66:9c:0e:6e:b0: 17:82:a0:64:01:bb:f0:17:14:32:95:1e:27:ad:39: 05:b1:5d:57:9d:b5:37:e7:22:db:2d:2c:cc:99:63: f4:ec:ba:35:19:17:4c:ca:88:7d:a1:d5:88:b5:49: 6d:9b:18:19:c0:dd:3e:37:29:ba:b6:71:3c:df:56: bf:25:36:9f:99:e2:f5:16:6f:66:79:05:8d:72:e8: 91:4f:68:9b:96:2f:d7:a0:15:e8:f0:04:e3:57:a2: 32:81:05:5a:99:12:9c:41:95:ac:52:99:68:a9:04: f0:dc:1f:bb:23:1c:41:af:9b:65:b8:fd:d7:3d:97: 14:80:08:bf:47:5c:65:56:c2:e0:92:b9:bb:11:38: 7b:36:b1:4a:e8:05:8f:fe:33:bd:84:d9:1c:00:5e: 3c:e8:96:af:52:25:0b:76:7d:3c:44:ce:f9:6a:aa: f9:19:03:73:78:91:ef:5c:3d:a0:1b:7e:04:4b:0a: 32:09:35:7d:f3:c1:af:e5:f5:5c:a7:38:bd:61:a3: a1:69:29:4c:cf:78:36:f6:2b:4d:ee:4a:6e:dc:06: ab:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E6:49:0C:D5:E7:86:14:5E:FB:36:62:98:03:48:23:AB:A9:6B:BE X509v3 Authority Key Identifier: keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:5a:bf:c3:b7:69:0c:b0:35:ad:13:8e:a8:25:f0:36:a2:42: d4:d5:d5:87:15:61:2a:28:49:55:2f:ec:23:13:c8:f4:4e:08: a1:f0:d3:da:36:45:57:3c:82:cf:dd:bc:7f:0e:6e:da:55:b6: 8c:68:e9:73:e5:61:57:a0:1e:69:92:cd:1f:98:c4:8f:ff:5b: 9a:18:b1:30:24:3b:52:be:c5:36:c4:5a:35:1a:7d:f3:cf:41: da:30:9f:4c:e6:af:81:b3:e8:8d:e1:2e:4a:42:f4:10:0c:6a: 42:1f:11:ab:fa:58:2d:6f:f1:99:0c:45:f4:8e:2a:31:6e:e2: 61:a3:81:46:14:2e:9d:3a:d6:62:4e:c0:16:96:70:fc:8a:8e: 89:86:e8:22:18:7e:57:5d:d5:f7:1c:a4:9c:dc:5e:dd:55:e6: e2:ad:85:9f:44:8f:a9:ed:28:34:e7:2b:6f:68:63:3c:a0:8b: ed:4f:28:2b:10:67:34:01:79:12:2c:64:28:aa:52:1a:22:37: a9:aa:e0:6b:b9:04:25:31:c8:b9:73:d3:24:df:d2:df:30:22: fb:75:c0:ef:0c:af:32:a5:73:80:6f:eb:d2:24:80:c2:60:0d: ba:f4:2c:53:da:13:35:76:07:4f:ea:a4:a7:89:69:d8:f2:76: 4f:89:84:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHrDEzwv+vSLYdPVhjgS0zC3MKwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNG MDU0ODFCMTAeFw0yNTEwMTkxNjE3MDVaFw0yNTEwMjMwMTU5MDVaMDMxMTAvBgNV BAMTKDRBRTY0OTBDRDVFNzg2MTQ1RUZCMzY2Mjk4MDM0ODIzQUJBOTZCQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFxQlgvdRCQXpAUib0gYGizZkx Bv6UmyGrS1fxDKxilp01shsYDFRmnA5usBeCoGQBu/AXFDKVHietOQWxXVedtTfn ItstLMyZY/TsujUZF0zKiH2h1Yi1SW2bGBnA3T43Kbq2cTzfVr8lNp+Z4vUWb2Z5 BY1y6JFPaJuWL9egFejwBONXojKBBVqZEpxBlaxSmWipBPDcH7sjHEGvm2W4/dc9 lxSACL9HXGVWwuCSubsROHs2sUroBY/+M72E2RwAXjzolq9SJQt2fTxEzvlqqvkZ A3N4ke9cPaAbfgRLCjIJNX3zwa/l9VynOL1ho6FpKUzPeDb2K03uSm7cBquzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSuZJDNXnhhRe+zZimANII6upa74wHwYDVR0j BBgwFoAUrkACt+kq9Zx25/i+SzSRk/BUgbEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGMxNzFmNC1iZDExLTQ4ZWQtODdmMC0yN2VhMTIwOTA2NGYvMC9BRTQwMDJCN0U5 MkFGNTlDNzZFN0Y4QkU0QjM0OTE5M0YwNTQ4MUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNGMDU0 ODFCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkx OTNGMDU0ODFCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZav8O3aQywNa0Tjqgl8DaiQtTV1YcVYSoo SVUv7CMTyPROCKHw09o2RVc8gs/dvH8ObtpVtoxo6XPlYVegHmmSzR+YxI//W5oY sTAkO1K+xTbEWjUaffPPQdown0zmr4Gz6I3hLkpC9BAMakIfEav6WC1v8ZkMRfSO KjFu4mGjgUYULp061mJOwBaWcPyKjomG6CIYfldd1fccpJzcXt1V5uKthZ9Ej6nt KDTnK29oYzygi+1PKCsQZzQBeRIsZCiqUhoiN6mq4Gu5BCUxyLlz0yTf0t8wIvt1 wO8MrzKlc4Bv69IkgMJgDbr0LFPaEzV2B0/qpKeJadjydk+JhEk= -----END CERTIFICATE-----Generated at Mon Oct 20 07:10:20 2025 by rpki-client